Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
File:                     2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft (raw, json)
Hash identifier:          PEuJxKoY2+vGNowJ2fFo7CPX4DmXbTniBtCPqVOycvU=
Subject key identifier:   1F:AA:7B:23:DE:2C:31:3C:A5:1A:F2:D5:F4:2B:86:80:20:73:9E:E1
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Certificate issuer:       /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial:       0197684DFEDBA33A6C0BDD7682579579AB47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
Manifest number:          15E3
Signing time:             Fri 13 Jun 2025 08:00:31 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:31 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:31 +0000
Files and hashes:         1: 0pwUWI_ZYs9C1HliLN-mnpY4Imk.roa (hash: Jd7eKXaBRsHjAr5MfT0g+jpObBfFUUjm1+l++40pejo=)
                          2: 1kiFOzSUYK3pcMeNGPSk3j4Tzsg.roa (hash: vMMj9ST74YlPNcRgppnnEZwNxejYhCE+D5UgkKQqDFA=)
                          3: 2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl (hash: pk2xdyAXfC/eDlC5P5DJhtCAMui1XtQY951eaoe9mdY=)
                          4: 316HUHVaTURv6QAbNKnjijxsrWc.roa (hash: HxDnqH4jBx7TcLDFfZMb8hD49uNoY7/Hc2rLkshPS+w=)
                          5: 3K-ochPFznfa1R58KADoobpI-vU.roa (hash: E6kgHgglfZ2aDwdeJ1gi09PFBDh7xrY6BBweccfhYH4=)
                          6: 7QrXFXVaU6iFE4xukiQ4Q3hL8fw.roa (hash: 8TmS/BxiWmrcJ0MOep7s2ZHsv/AUmP9JbtwuFvQiIOY=)
                          7: 7_-XQ5S3ycvuSV1bhy-uYlLyOfc.roa (hash: J+exth7L5Mno2CstKeAk8mFxBC1KnZRyQEI9CbsZFlU=)
                          8: 8Si4NFM1aPw38WaLXshjg45ES-o.roa (hash: UrtM0JR+sNV9ZzpQeGuDk9MuIMLeRxzIPtw2VVcogHo=)
                          9: 98W2p6rqVlQsbZ0blHTEkf-sWSY.roa (hash: 6a0M06Lv1SRNn4VgtI5MyppdIV/qAeomn6q+aHDsUgU=)
                          10: 9B35UfCQ13KtDn51RvM_dp9PjDo.roa (hash: oY5j1jE5bBrwX+DjAZmWx8Oie4fGVA/ZCu+WjsgOPDk=)
                          11: 9QSaDLwXWd5w6cmYxbCVpZsSJYE.roa (hash: viMMVl7z3d1MZstaQ+g6rnL64YomgnG0JZZWPIY8by8=)
                          12: 9sVKMgFNatqTmSNiEO4ORQQLRt8.roa (hash: lshn/9YxVbRH0YDgX5hhu796Vkjs6hPEJYrUBAKZCWE=)
                          13: Bt9x6TJjgcL10O7Bnr5I4CP0bvc.roa (hash: xLyT3PayX46ktCq1QetEYB5B73wxy34WeOz/POaSXf4=)
                          14: FQqrVaWrjwGbwrQKWFwL-ALxue0.roa (hash: Y21wnJ7WUmqlJg6zD0OtGsbthsIYepPEi/nFJcnb1eU=)
                          15: FpAB9cGzamoAhWywpgXZOn6yYZU.roa (hash: JeApP83qb+O/+snqG+vdGyDdB6Lk9H1Qm5g02fPiOKo=)
                          16: GWp0rSjdfGwKcSPnGUUsbETvzK0.roa (hash: ivBZ83R8nrtLIJ9zF7ql/DDHWzrqf4gsmmhVIUPiq24=)
                          17: IGrSN_Z0ax-ky7QE1sY9ZhJdoBM.roa (hash: KQukkBzYCAe/vdNdC/O/VpKFkKbDN6k4Tl6VoqE1eLc=)
                          18: IH4sXcqwnvhlYhYNVGkohML13P0.roa (hash: 0Ria3/AvAd2cgyor17KXSZfKr+gZyyKEPG1CmeJ0Q+Y=)
                          19: IsYzqtd5hHafDqEegsYhPCQAd4M.roa (hash: Bkpcl7yMwhE1jJAkRRVc2cwo6WyLqJYTr5qBVoOdZ4E=)
                          20: J70m5SfxW3sdmib1kWAXQGKfdOM.roa (hash: 8Qog18shfCUsPP/BYCaBYaVY5SSTRMf2jp9RR4QSNUU=)
                          21: JDTeB5ypilgeJHkI8PjR-xHlw0s.roa (hash: pnZ6eyfA1+Rq55dO0siEmrlk8zVFvVQdaV2xF71oA9A=)
                          22: NVxN2pUJ5hU7q6WInqRgg2VCXdM.roa (hash: ozIX4QNRWum7wQcyJGvbiqD2NKOdyiaePqT6L3VyYp4=)
                          23: OFaNACp1IWknaNQsvLRLXXXO_lg.roa (hash: ItMuBib+bKE+rwEQI/M4y7+dv6WGn0qrSR+gF36A7QA=)
                          24: Qegn6rKTYeBsjc4SCsbtD3nkXIY.roa (hash: L0tLGFkuWFIKwICmtL17UlqlhulwH0ojyrlH6YIUJls=)
                          25: RU50R6pd3nRtCHtX2WkkAw7Llyg.roa (hash: T5CeoexH64aMyXZVlfI39Z1RQIh+lo/XDGBIg41v35o=)
                          26: RmAE-L4PDZBoG-Xx5Cvhlp2SRZU.roa (hash: rjDNh/X9V2tOJCumJu3h5LLgZycuOJpT5mRt3QFUYc8=)
                          27: TCNerbOYM531qLiSNUelOuHidRg.roa (hash: 3I5Oxm4sYwoSvKFd38TBXes5Lqmb9dRt3fPryeODDKo=)
                          28: TZ8F3d3rBpKHR-R3hXvibc-affE.roa (hash: P6bovpmV8OJZ3kMwUqsF9enDTGE3fNmKJ0/O8Ggq2YQ=)
                          29: Tz4xIKHLTZxOJOkgYeHX5p4k0g8.roa (hash: jsyU4csifLHfmNDkk88po/6joQrMVPaK6WEml7DFV/Y=)
                          30: Vaon60b4zHrksDOoYnDPkaadIxU.roa (hash: Uok4nskSinodPJTJYseZVbLMCiqE058+0pxNVBQOsk8=)
                          31: Wk2nk_npfvuDK3d7yb8uiNsWgso.roa (hash: 9uoY0xdAMA71Q732eb1TH1o48fqtG8bkS/TtEFw86ho=)
                          32: Y-hduokYyBizMZ1aIw3u9MNvOIM.roa (hash: Miwe2NCZBRprn9PF00vl5CBRdxZLcTyIRzuNgn9LKoI=)
                          33: YN7VOdrFA4DxBRGKlzu-DkZKxbw.roa (hash: Tw2n5Zr+e89OCD53j7fn1mis/crLkVVV4D/UZkzzMS8=)
                          34: _rGOoLombdqZx64ZxDfzpaqjTrg.roa (hash: dApbReBYXmLZrFYcB/cQX8tI6KM0yzgxOVCRPmnuLoY=)
                          35: _wC-1ROPyPjW0MawMd3mYCPZedQ.roa (hash: UNeTJPIxBOXFHEiJTwBfIDA25eLHNfDNGAyjojuXXck=)
                          36: d_mDouVtydIsXoD1I1kmanE7QdE.roa (hash: LhnrAE1NqO/WJxjZIP+R8AUtoWMyRXFMztjGxmdOIhE=)
                          37: eW31QtIw0De2hC-wRcz6BbqJBP8.roa (hash: Wc0UbtBVnHavOJyxW2WyHxWo+alMpdJTl5RGV+Bp6cU=)
                          38: hrNAsHvAiF3wM9SA462bg8ZfLa0.roa (hash: XcVoDsvzCljVGMYXw4itgRqDUp6Fp93GIEi5VbC5J1U=)
                          39: kMHgDNH9TXu-UX-kOSEubi3iK_w.roa (hash: UgvMhWz/T+kOQxoEXopZfMQQ/N59klcu3OYPLl05/sc=)
                          40: l9yER5OzV2Zs9rEny9MaVLJSJWE.roa (hash: MTvM1L4a3zSotoCTxk4B550ByU2kERL/BORHSPutlKs=)
                          41: lA75bW7UySj-4Gmj2_AP8C_iuC4.roa (hash: hqdS8xALOEXysaeF5hAmiV4VjJ9G3SYaE0SbHmeuKBQ=)
                          42: lHAwqxpq3Bk851rpL4G6G32KPvo.roa (hash: SsFPabE3LSUH4F0liColQhC10VYQbs8KMbBtFFz0miY=)
                          43: mzknVHY04SbVvkzSjTvkOKHusbU.roa (hash: wPUzeq3u9NQSOHmVS65zBorq/5N5aKuEt5s4b825RM4=)
                          44: nNCkOfG_W5tXBcfy3ePAuNExXn4.roa (hash: Veh+B3lJzCP5HGhQvtAXGs8A6jPedDNBSb38EUASDkY=)
                          45: nb1DMSWD0ydUqO8eKHUNScXGURk.roa (hash: oTJe1GNauOKZxSYDo+8j4eezAo0VUMGAfZcmWGMZY+g=)
                          46: qcpy2trLVlMtCs_YUMoapnpVOiY.roa (hash: kXj1j8R13poDsCnQAYIV+jTRpyGNnFmiFn63Si++gbk=)
                          47: rVq_rgyYfxisfZosLTEYOK8012I.roa (hash: qfUc/8CPVfgW5D79b9lNR+Fs0Ehkxd+q6+C5E566Dkg=)
                          48: rtEOFTOttDdskjTRkIEEQ2lhPbo.roa (hash: /Lf+xqlu0+334vguLGf9g6R3YuTOFfLWSie+GfS9FPE=)
                          49: t0rBAKgYsiYrjVsbAkJNYYT70fU.roa (hash: 6uujdjjncCVXzPlW8+sHpbZpcMrWi+RVeuO4nmVWv+Q=)
                          50: vbHCYKcM-6QqxgnTe1hgMUxJ5Ww.roa (hash: RzMewHgYJqqbEL1Df9/KePaiVSLqKz56MdonTCkLpKo=)
                          51: vnfpX8VN5wePb4gxJPo9osi4y68.roa (hash: +iO0VZb7J6Ag3acv9aypcQVTaO/2DiP8TP90mQZy6/s=)
                          52: wmVVFDH6XImK1Dq5D3yTKM7LmC4.roa (hash: 5ew+YI6A03XXDHcW34IPcQmeliOZOZVp10AAv6PNozg=)
                          53: wx9a8pVF7fnoTBAoG71gvVBPc_Y.roa (hash: IJOJKrk97D1lz8Q6SGisOh1Nji4BvJsLyuj6phA3kdU=)
                          54: xNPqn5SIMHiXARXbHfFajMtKxBg.roa (hash: dT+L/nzcJBKc6owxGRNwZ+MkdqrDMpSlMlQezZcEb8g=)
                          55: yNbbJn707tS_a8Gi9J0Tcx69Bis.roa (hash: /P8YL51lx4GgfeOWwtR+Oj2TBAmtiisgHyAoHeKBLU8=)
                          56: ylEgvmf2Edwqr6JMpW-xH5LCR7c.roa (hash: BK+TL29JkN+DVc/LG21brTqrMPOr6JiJ4Q+YvOP4Kes=)
                          57: zZ3LXASmvnU-tG5IFxAXhcytpeY.roa (hash: vauvWlngvw9B9FLlnT3JWLQjDLxvQzC3J5a7IlzCo4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4d:fe:db:a3:3a:6c:0b:dd:76:82:57:95:79:ab:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
        Validity
            Not Before: Jun 13 08:00:31 2025 GMT
            Not After : Jun 14 08:00:31 2025 GMT
        Subject: CN=1faa7b23de2c313ca51af2d5f42b868020739ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:14:2e:78:58:02:73:01:b2:c7:ea:36:47:
                    5c:1d:0c:83:32:38:12:c4:66:12:c7:56:60:63:1e:
                    9c:1c:74:c6:8b:00:58:a5:f1:95:b0:c1:6c:7f:dc:
                    54:b0:4c:7e:ce:1d:7c:cb:38:57:a5:b6:14:19:3a:
                    f3:96:78:b5:df:db:cc:e5:ce:ea:da:50:74:dc:a9:
                    b7:50:df:45:e9:6c:bb:86:cf:90:06:51:86:99:c9:
                    54:c6:6a:41:bb:37:54:43:0b:54:97:c5:79:80:e8:
                    5a:98:5a:ed:b7:71:62:65:f5:20:8f:a0:0a:53:42:
                    32:34:02:ec:18:0f:93:7c:5f:d2:f8:05:d3:e5:f5:
                    08:33:c0:d4:3c:4c:6e:76:a1:8b:b0:af:63:61:24:
                    94:18:1c:36:db:b0:a6:2f:c1:73:17:12:ed:36:aa:
                    6a:59:16:9e:73:81:08:34:0b:07:4a:55:98:8a:72:
                    45:d5:24:4b:13:6d:cb:3c:c0:1c:66:87:1c:2f:f6:
                    c3:c5:6f:96:c7:44:e5:50:0d:86:5e:64:a4:63:f5:
                    90:48:ec:bc:79:fd:22:ee:00:8d:a3:65:0f:99:6a:
                    fc:ee:00:9e:d1:79:e3:47:70:91:77:16:79:e6:9a:
                    b6:85:cc:8d:46:ee:c7:11:db:7d:22:ab:76:e8:7e:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AA:7B:23:DE:2C:31:3C:A5:1A:F2:D5:F4:2B:86:80:20:73:9E:E1
            X509v3 Authority Key Identifier:
                keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:cc:96:78:8e:5b:b4:c8:4a:3f:58:86:70:cb:75:a1:81:a3:
         5d:7a:ee:ec:12:51:58:6d:82:03:b0:76:35:d3:f6:3f:6d:9d:
         90:d9:f1:b4:78:62:f2:08:e7:c6:d7:39:e1:88:38:49:c7:79:
         08:2c:cc:0f:31:3c:d3:01:af:11:8b:6d:db:c7:4e:fa:cb:d8:
         cf:36:77:0e:c3:82:e0:1b:ac:4a:b2:c6:f9:8c:44:45:3f:55:
         a5:8d:4c:55:dc:4a:aa:c7:03:9e:cc:41:d1:a0:22:1b:e6:37:
         79:c0:4f:9e:23:25:98:89:c5:01:c4:88:da:a5:8b:8d:9d:ff:
         1d:cd:6b:9a:57:b4:b0:b0:e7:b6:5b:ae:64:16:cb:c4:d6:c9:
         f9:83:4f:ed:a9:75:fb:1c:9f:fe:21:c1:99:bc:94:7a:c2:b9:
         e0:7d:d5:53:8a:8d:d8:96:04:5a:94:2c:53:f8:c9:57:e5:c7:
         7c:36:60:2f:22:81:9e:90:c3:7d:f0:16:95:17:26:cf:bd:b3:
         93:6e:79:86:a6:b1:8b:e8:1a:39:db:01:c5:de:6d:a9:3b:e4:
         9a:28:02:26:42:76:26:9b:c5:5e:a3:cf:b6:8f:e5:78:2c:37:
         59:f6:cc:75:b5:6e:5a:99:02:7a:c9:93:d9:18:80:c7:c4:43:
         68:fd:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:02 2025 by rpki-client